Analysis
-
max time kernel
131s -
max time network
122s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
18/08/2024, 16:12
Static task
static1
Behavioral task
behavioral1
Sample
a7543f37936fb0bce0f6138de16afdac_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a7543f37936fb0bce0f6138de16afdac_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a7543f37936fb0bce0f6138de16afdac_JaffaCakes118.exe
-
Size
36KB
-
MD5
a7543f37936fb0bce0f6138de16afdac
-
SHA1
e7b56ee9d17a21e6da3ec051913aa5464e0961ed
-
SHA256
68d3b01803af3c308d6566c20431731eb4eda03f0c05d6f0011b7593c80827e5
-
SHA512
b698f971030f9b0a80663d9610f15790d8addd788306c1b3cb2b07bf888f99f760d8f9890ff530de4f08b2c95910852136c6add646ad2f855bfe06281dc26064
-
SSDEEP
384:bWN/dE/8O/dEq/VtxY4ENVlBV/dEvgeeKvOmvyCLChp5owDrynWIz/dE:baiLi8CHivrOEXL25oKWP7i
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language a7543f37936fb0bce0f6138de16afdac_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2956 a7543f37936fb0bce0f6138de16afdac_JaffaCakes118.exe